last executing test programs: 3.604608182s ago: executing program 4 (id=240): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, 0x0, 0x8801, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/21, 0x15}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000500)=""/145, 0x91}], 0x5, 0xfd, 0x5) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r0, r1}, 0xc) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 3.491896395s ago: executing program 4 (id=241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) r1 = userfaultfd(0x80001) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}], 0x1, 0x10001, 0x7f) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) close(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4c0, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="9a", 0x1}], 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.474516025s ago: executing program 4 (id=243): recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @rose, @bcast, @rose, @rose, @rose, @remote, @null]}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002540)=""/188, 0xbc}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000003640)=""/150, 0x96}, 0x1}], 0x1, 0x2, &(0x7f0000003740)={0x0, 0x989680}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r3, 0x2a) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012}) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a00048, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@rodir}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@fat=@nocase}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@shortname_mixed}]}, 0x83, 0x363, &(0x7f0000003780)="$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") 2.841165501s ago: executing program 1 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000000000000000080009"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000400)="babbccffa444df778f5888af11b7a02792eead382ce8e5a3fe8de8d934709a6d3028c500e0b9cac94b13ff016262d437cd8cead733e14597405c3db44156307b0d0e588700214c77b34ca218cd296148b251de32d8d99dd30d5d8519c718b296451ed8130f86b63948c44f732e192a5391c15af92a6871d891d74c23ccac17a3027a3c44ce6725cfc9f45f26dea54490d8bd4eb0dd515c6ebfc4f85b21dc8c10a6e2557e2b35257b2627714de892ebd8b11ecf3e85b1433f6808f3c387cdfc", 0xbf}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="e0122271d33793091b9e946f60608cad11e74d9638948e814f20c4412fe35e81792946a5b209009464cce6c22733c251dbdeee3014ad5b9b32ee81839fef53d5fb4f694e7492bffe38e7c143277a934d603d81f830c956343c4c65bc6a33b37c71d682078f6b0a09562ca234075c92e50417867ff61388055a7e54775c6940340ccfeb9006c17c72b2fc843aef0be76676", 0x91}], 0x1}}], 0x2, 0x1) r2 = userfaultfd(0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000006c0)={{r3, 0xfff, 0x10001, 0x3d2, 0xab, 0x0, 0x5, 0x24, 0x5, 0x7, 0x101, 0x4, 0x8, 0x3, 0x3}}) 2.830347341s ago: executing program 1 (id=250): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) openat(0xffffffffffffffff, 0x0, 0x400000, 0xc6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x1e0, 0x1e0, 0x120, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0xffffff00, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xf8, 0x120, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x5, [0x4e23, 0x4e22, 0x4e22, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e24, 0x4e20, 0x4e21, 0x4e20, 0x4e22, 0x4e24, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1]}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x5, {0x8}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'macvlan1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x84, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x7, 0x2}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x2, 0x5, 0x5, 0x4], 0x0, 0x2}, {0xffffffffffffffff, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="bf0d64cae34e7ac3b70b7db2434dbe7770d2273694fa74658e6f60c098391b36a687ae78fd7c8ff6e468b9ece0fb716876072a5add567c522d1d82eab05273a6e2c69fa5bd1d88efbc1d2d82ed5a34cfff36f2c2c3809c4284578356143985995e0a93ed75c20d972a83098119ce8a3cad85808b9115aa3cf66e57f1c83420e26da32c6e1ee6592998e5441fdefee2d49be00ae1a3db60ae70210a7fe12d8f3e9bb806b2e043ec8f2966bded6711386c111c0e40cff362bc9a05d7289e29244876a9a879b589734ed8cfb9fc68a6932e7a726c2c85f3b780"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000020000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000000500000000000000000000d6a600000095000c000000000012ef1f4adea3d71d242d87c915e52fdfcd036deefb50dfce5bbf08369e3787dcd31d46fca4c603ca82216714a2e441689209a331fbdc0d9cd62af47877178240d22d17215f6af146a800c479d5b8b0674e49e37d75d38a60e9e2014f1a12ce8715ed52736dadf9710b4a74d09a325653d2220f03d0163d6b8bb219010d22510da903b800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa04aaaafacfdefd4dcd5f0635570024000200000011907800000000000000000703fc0000004e20000c907841000000"], 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mprotect(&(0x7f0000d0d000/0x4000)=nil, 0x4000, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) 2.512106869s ago: executing program 4 (id=251): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000180)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@utf8}, {@shortname_win95}, {@utf8no}]}, 0x7c, 0x2c1, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$fuse(0x0, 0x0, 0x2a0000a, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') 2.497880999s ago: executing program 3 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x550}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfb9, 0x1000b, 0x6, 0x2000000007f, 0xea7, 0x9, 0xfffffffffffffffa, 0x2, 0x4, 0x2, 0x1, 0x3, 0xd46, 0x2, 0x1], 0x0, 0x80002}) ioctl$KVM_RUN(r3, 0xae80, 0x3000) 2.393612342s ago: executing program 4 (id=253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000001480)={[{@inode_readahead_blks}, {@barrier}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0x1, 0x799, &(0x7f00000001c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x400000ff, 0x7fffffff}}], 0x20}) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000cc0)={0x0, &(0x7f0000000b00)=[@nested_load_code={0x12e, 0x80, {0x2, "66baf80cb874f2bb8eef66bafc0cb800000000efc7442400adeae8b2c7442402f0ffffffc7442406000000000f011424c46121c2780009470f22c3b8010000000f01c126f24580c70045c0ba00000000530f20d835200000000f22d866b8b8000f00d866ba4300ed"}}, @cpuid={0x64, 0x18, {0x80000000, 0x4}}, @rdmsr={0x66, 0x18, {0x238}}, @wr_drn={0x68, 0x20, {0x6, 0xe35}}, @in_dx={0x69, 0x20, {0x570a, 0x2}}, @cpuid={0x64, 0x18, {0x1, 0xa}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0x1, 0x4bf1, 0x7}}, @nested_vmresume={0x130, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1, 0x6}}], 0x188}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0x6e, 0x1, 0x7, 0x1, 0x3, 0xfb, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xb3, 0xa, 0xb2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xca, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x0, 0xf, 0xa7, 0x9}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0xf0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x7, 0xfffe}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x8, 0x7, 0x9503, 0x2}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x411}}, {0x29, &(0x7f0000000a00)=@string={0x29, 0x3, "6596e6ef134bed8af655b0a9182f9547364c17be5e882851839c86185e578bfdc968156a1e6f58"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x42a}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 2.303374694s ago: executing program 0 (id=254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x2000000000000) 2.208084936s ago: executing program 3 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 2.207577066s ago: executing program 0 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[@ANYRES32], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000380)={0x60, 0x3, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8, &(0x7f0000000300)=[{0x6, 0xffffffff}, {0x5, 0x5}, {0x0, 0x6, 0xfffffffffffffffd}, {0x5, 0x101, 0x8000000000000000}], 0x4, 0x9, 0x10, 0xa, 0x4, 0x60}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 2.202864876s ago: executing program 0 (id=257): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r4, &(0x7f0000000140)="f6", 0x1, 0xe32d) fchmodat(r0, &(0x7f0000000400)='./file0\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006600000000000000180000000000000000000000000000009500000000000000970300000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x8) r9 = eventfd2(0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) shutdown(r7, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r6, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r6) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000030000000000000009000000180000000300000000000000050000001800000006000000000000000700000059600600010000006541180008000000950000000000000042036e734717234a4d0cc3c4ed5b6b57ef2cf670086e594c4d99bbd01dc6c58726d3f91b4d6255a6d0b2a246d55d57829d6adbd64ce367b63b76aadf00095fba93b9fb9e5d174ba587caeb20b6566b8e9997cdb485b2864c964cc0079409eac87ef56d71fa"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', r10, 0x19, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x1, 0x3}, 0x10, 0x1b9bc, r4, 0x8, &(0x7f0000000280)=[r5, r4, 0xffffffffffffffff, r4, r4, r5], &(0x7f00000002c0)=[{0x4, 0x2, 0x8, 0xa}, {0x0, 0x3, 0x9, 0x2}, {0x0, 0x1, 0x7, 0x9}, {0x5, 0x3, 0xb, 0x2}, {0x4, 0x5, 0xd, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x3, 0x4, 0xd, 0xb}, {0x4, 0x1, 0xd}], 0x10, 0x200}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3820c4b, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) 2.144985998s ago: executing program 3 (id=258): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='dummy_udc.0', 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) 2.136365258s ago: executing program 3 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000003580)='./dev\x00', 0x0, 0x800) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) syz_usb_connect$uac3(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240290060f0a2525040000000a040009040200ffff0230000904020101"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 1.979009852s ago: executing program 1 (id=260): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2200040, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x200, 0x6, 0x9f, 0xd905}, {0x6, 0x1, 0x1, 0xe000000}, {0x539, 0x12, 0x0, 0x2}, {0x9, 0xff, 0x3, 0xa}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001cc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x600, 0x370, 0x0, 0x1d0, 0x460, 0x370, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0x198, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@unspec=@string={{0xc0}, {0x1, 0xff8f, 'kmp\x00', "6c217c7959ffc739d214e37d45a0fe8969ab3ae27f803ad79265aaad88f53a1c9fb692940a07f8162414f4239d1bb242aed249490abff92e9fc357607e510e32874f66cf3d4b4caa8fb6d1a42b0179699f56b4241e8b568f0294a1313b11531fd5ee9ba000dba517c13dc05d0e93758f7fcb884551171d16a1c1cb0bc33bcf33", 0x66, 0x2, {0x8000}}}, @common=@srh={{0x30}, {0x4, 0x4, 0x10, 0xc, 0x5, 0x0, 0x441}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xd}, {0xffffffffffffffff, 0x4, 0x1}, 0x9, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0xff000000, 0x0, 0xff, 0xff], [0xff000000, 0x0, 0x0, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7e, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffff00, 0xff], [0xff, 0x0, 0x0, 0xffffff00], 'ip6gretap0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x2f, 0x5, 0x6, 0x4a}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7f}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) fallocate(r0, 0x1, 0x6ae8, 0xf41) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r5) close_range(r4, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 1.835737076s ago: executing program 1 (id=261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f0000002400)=ANY=[], 0xdb, 0x1500, &(0x7f00000002c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400149242, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xb4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x4, 0x2000000000000, 0x0, 0x0, 0x15, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './tracing/dynamic_events', [], 0xa, "dede4261a6"}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000001400038010000380"], 0x28}}, 0x4004980) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffe}, 0x1c) timer_create(0x3, &(0x7f0000001940)={0x0, 0x16, 0x2, @thr={&(0x7f00000017c0)="dca607c8fe6850a5d414a4af0ed671ac17ff8b7db1d2bed704063122c32c4618b11b4b38b10a3fe7a7c8b1cc2c6685e8694945388f87383a699e406780a77001ba256a9102b5cb1e4580738817b65e6e0488080e1e", &(0x7f0000001840)="4896440049eb875b5903119828e43aeb5f8e4d3ec0a20760712317164861aa8cd46bf59d20044cebd81992c290c7ab26b7cecf2be994e24bc78abfd8744323fcb0dee8432b14220ed4fb450295702db3d85196fc3db89a7bf825abdad459a3485b12b7fa20f87793908313c9f501e5cd0d6437eafba41b6b734e640ddf1ae342e9b4d50eda709e05b8ec36da7dc8ed6fba8f75695a0e39fd8370f3f0c18231531569bc7a61ed1b353dcc7f3282ef7342b04ade4fd27ffcb9f244430881d635fac2318c9c7df6cfc1ba5999a57bdf547bd172"}}, &(0x7f0000001980)=0x0) clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000001a00)={{0x0, 0x989680}, {r5, r6+60000000}}, &(0x7f0000001a40)) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x8002, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x66) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fcffffff000000000000000085000000610000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a0479", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.805892406s ago: executing program 1 (id=262): r0 = syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x5592, &(0x7f0000000900)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4c000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r5, 0x215, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x64}}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4) r7 = epoll_create(0x4) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000280)={0x30000010}) shutdown(r8, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="030f000000000000000008"], 0x2c}}, 0x20004090) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'workdir'}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1.711912339s ago: executing program 1 (id=264): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000180)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@utf8}, {@shortname_win95}, {@utf8no}]}, 0x7c, 0x2c1, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) rmdir(0x0) 1.64513863s ago: executing program 32 (id=264): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000180)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@utf8}, {@shortname_win95}, {@utf8no}]}, 0x7c, 0x2c1, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) rmdir(0x0) 1.555374742s ago: executing program 0 (id=266): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@inlinecrypt}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@noblock_validity}, {@discard}, {@journal_checksum}, {@acl}, {@resgid}], [{@dont_measure}], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x3f2, &(0x7f0000000ec0)={@local, @remote, @void, {@ipv4={0x800, @esp={{0xf, 0x4, 0x2, 0x0, 0x3e4, 0x67, 0x0, 0xda, 0x32, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x28, 0xe4, 0x0, 0x2, [0x58b6, 0x18, 0x5, 0x4, 0x3, 0x2, 0x319, 0x3, 0x81]}]}}, {0x4d6, 0xf, @basic={0x0, 0x0, 0x6, [@ipv6=@generic={0x5, 0x6, "1d2ad4", 0x152, 0x29, 0x0, @remote, @mcast2, {[@routing={0x3a, 0x4, 0x0, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0]}, @hopopts={0x11, 0x9, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xa, 0x661, [0x6, 0x1000, 0xfffffffffffffff8, 0x9, 0x9, 0x9]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9e, 0x1, [0x5]}}]}, @fragment={0x67, 0x0, 0x2, 0x0, 0x0, 0x9, 0x64}], "0a4cc21ded6818b79bb4a7b5357bb9aaae2650d687f9fd2e77987522cd0f8f69850d702fb7b6be43aad45fa2b42e4dd2b62ccd72034df146b3778b5fadf70862c68a33a96e1d30d7317d48edc55cf7523f3737ae9680ffce56d87a39e9b92c95fe5d3fd3dc2e323dd3c101e17c5f0191f9590a07d4693160b0a52c94985459b3b77b62a1679d9770e5feb6ccb3d624eea4dd864edd6acb48b02768e7589eca2cdf47d0161fee0eced50df425e913b1de9f5c9327f1d9b12f88ad2ea94124d9c87fcf1ffe04eb3398760e"}}, @runt="fd83a11577e606008c954f8fb0e7e5700551fc440de9220acb6203a859a0e20a0464544cf8dba3d63555ce3db56650c0b8d1a175e0f2d05efa2327f9e6b656", @ipv6=@udp={0x3, 0x6, "9000", 0x92, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, {[@srh={0x5e, 0xe, 0x4, 0x7, 0x5, 0x70, 0x6, [@dev={0xfe, 0x80, '\x00', 0xd}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @remote]}], {0x4e20, 0x4e20, 0x1a, 0x0, @opaque="967b298457409409ab6a589228c307e00b3b"}}}, @ipv6=@tipc_packet={0x7, 0x6, "aeff74", 0xf7, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@fragment={0x6, 0x0, 0x8, 0x1, 0x0, 0x10, 0x65}, @fragment={0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0x66}, @srh={0x2e, 0x4, 0x4, 0x2, 0x0, 0x50, 0xfffa, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x0, 0xe, 0x2, 0x7, 0x0, [@local, @local, @empty, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x2c, 0x2, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1f}]}], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x1, 0xb, 0x1, 0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, 0x7, 0x4, 0x4e22, 0x4e20}, 0x3, 0x4}, 0x2}}}, [0x0, 0x0, 0x0]}}}]}, "ede56f179d1871eb", 0x8}}}}}, 0x0) 1.342393368s ago: executing program 2 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 1.221696331s ago: executing program 0 (id=269): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) (fail_nth: 1) 942.086497ms ago: executing program 2 (id=270): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x82042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x200880, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x3, 0x1508, &(0x7f0000000f80)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="25715afa3a7216594f1b12ada77d", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x4040, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000001, 0x0, 0x465b}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000440)=@x86={0x1, 0x1, 0x2, 0x0, 0xfffffff5, 0x5, 0xc0, 0xfc, 0x4, 0x30, 0xc, 0xdf, 0x0, 0xc0000000, 0xcaba, 0x8a, 0x0, 0x8, 0x5, '\x00', 0x8, 0x9}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000080)={0x2d1, 0x0, 0x1, r11}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000240)={0x9f, 0x0, 0x4, r11, 0x1}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x83, 0x0, 0x0, r3, 0x5}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x26f, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x10) chdir(&(0x7f0000000100)='./file7/file0\x00') 924.295098ms ago: executing program 0 (id=271): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x24, {[@global=@item_4={0x3, 0x1, 0x9, "125fa4f7"}, @global=@item_012={0x1, 0x1, 0x2, '\x00'}, @global=@item_4={0x3, 0x1, 0x0, "b2a08d39"}, @local=@item_4={0x3, 0x2, 0x3, "5b608242"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x1, 0x2, 0x4, '#'}, @global=@item_012={0x1, 0x1, 0xa, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x9, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @global=@item_4={0x3, 0x1, 0xb, "9ccf9309"}, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) 671.888204ms ago: executing program 3 (id=272): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x14450, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5598, &(0x7f0000009cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x2154, 0x1001}) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="2bc37a17276b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x1, 0x14, 0x66, 0x0, 0x47, 0x0, 0x0, @remote, @private=0xa010102}}}}}, 0x0) 444.413679ms ago: executing program 2 (id=273): mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/20, 0x14) 442.87226ms ago: executing program 3 (id=274): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000e00)=[@acquire, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 400.155911ms ago: executing program 2 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) 361.261402ms ago: executing program 4 (id=276): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x4480, &(0x7f0000000100)=ANY=[], 0x86, 0x23f, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aa00000000000000000000ffff7f000001000107944e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000001000000000000000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x8, 0xa}, {0x0, 0x0, 0x6}, {0x2a1b}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x40000000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r0, &(0x7f0000000680), 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) readv(r4, &(0x7f0000000240)=[{0x0}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6e2) 357.249442ms ago: executing program 2 (id=277): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x491, &(0x7f0000000680)="$eJzs3M1rXFUbAPDn3ny0ffuRvH37qq1Vo0UIikmTVu3CjaLgQlHQRV3GZFpCp400UWwpNoq4EqSga3Ep+Be4E0HUleDWlSspFO2m1Y2R+5VOJ5O0aSYzsfP7wWTOnXNm7vPM/TpzzkwC6Fkj2Z8kYldE/BIRQ8XizQ1GirvrVy9M/3n1wnQSS0uv/Z7k7a5dvTBdNa2et7NcGE0j0g+TphcszJ87f2qqXq+dLZfHF06/NT5/7vwT75yeOlk7WTszeezY0SMTTz81+WRb8szyunbgvbmD+19849LL08cvvfnDV1lYu8r65Tz+bsvqciPZu/bHUq657tH2rWZL2N1QTvq7GAjr0hcR2eYayI//oeiLGxtvKF74oKvBAZsquzZtW716cQm4iyWxvvb9mxUI0GHVhT77/FvdOtT12BKuPFt8AMryvl7eipr+SMs2A02fb9tpOCKOL/71eXaLpvEUAIDN8PH0Zy9V5azvMbRck8Y9+f2v+d895RxK1l/5b0TsjYj/RcS+iPh/RN723oi4b4PxrOz/pJc3+JJryvp/z5RzWzf3/6reXwz3lUu78/wHkhOz9drh8j0ZjYFt2fLEGuv45vmfP1mtbqSh/5fdsvVXfcEyjsv9TQN0M1MLU3mntA2uvB9xoL9V/snyTEASEfsj4sD6XnpPVZh97MuDLVvsuJ3819CGeaalL7L0FrP8F6Mp/0rSOD85u2J+cnx71GuHx6u9YqUff/ro1WKkdWVdY/7b15t/G1ypFfcN27+5yXDSOF8739713+H+nw4mrxfzzEWbeHdqYeHsRMRgUpzOBsua/PHJG8+tlqv22f4/eqj18b+3fE6W//0Rke3ED0TEgxHxUBn7wxHxSEQcWiPH75+7df6R3sH+3wZZ/jMtz3/L+3/T9l9/oe/Ud1+vsvqdt7f9j+al0fKR/Px3C63CyU4XzQFu6M0DAACAf4k0/w58ko4tl9N0bKz4Dv+++E9an5tfePzE3NtnZorvyg/HQFqNdA2V46H12XptIlksX7EYH50sx4qr8dIj5bjxp3078uWx6bn6TJdzh163c5XjP/NbX7ejAzbZjpaPTg52PBCgC5rn0dOIiw2LF1+JlSeDpYubHhbQAX6vDb3rFsd/2qk4gM5z/Yfe1er4b/54by4A7k6u/9C7HP/Qo9Jvux0B0EWu/9CTbvqRfBIRd/ID//YXtnd+pf0b/C8H7StskTBaFyKqQrol4lHYpEK3z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8U8AAAD//1nt5lg=") (fail_nth: 1) 325.729853ms ago: executing program 5 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003353000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x5}]}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x9, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000100)=""/9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd65d15cdc00442fff0001fe8000000000000000000000000000aa0c2022eb0000000009000800090186dd"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) socket$inet6(0x10, 0x800, 0xfffffffd) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1c, 0x0, &(0x7f0000000380)) 0s ago: executing program 2 (id=278): socketpair$unix(0x1, 0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Dd', 0x0) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = inotify_init1(0x800) close(r2) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, 0x68a, 0xadd, 0x81, 0x400, 0x8, 0x40040200}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): m_t tclass=process permissive=1 [ 14.064731][ T28] audit: type=1400 audit(1786977197.953:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 20.810715][ T28] audit: type=1400 audit(1786977204.713:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.811777][ T279] cgroup: Unknown subsys name 'net' [ 20.833413][ T28] audit: type=1400 audit(1786977204.713:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.860642][ T28] audit: type=1400 audit(1786977204.743:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.860777][ T279] cgroup: Unknown subsys name 'devices' [ 21.000368][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.005983][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.108759][ T28] audit: type=1400 audit(1786977205.013:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.131909][ T28] audit: type=1400 audit(1786977205.013:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.156640][ T28] audit: type=1400 audit(1786977205.013:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.165090][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.188583][ T28] audit: type=1400 audit(1786977205.083:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.214027][ T28] audit: type=1400 audit(1786977205.083:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.248601][ T28] audit: type=1400 audit(1786977205.143:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.274129][ T28] audit: type=1400 audit(1786977205.143:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.274319][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.739601][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.746657][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.754152][ T288] device bridge_slave_0 entered promiscuous mode [ 22.762221][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.769357][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.776630][ T288] device bridge_slave_1 entered promiscuous mode [ 22.851010][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.858061][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.865590][ T291] device bridge_slave_0 entered promiscuous mode [ 22.875476][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.882815][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.890210][ T287] device bridge_slave_0 entered promiscuous mode [ 22.897079][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.904191][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.911654][ T287] device bridge_slave_1 entered promiscuous mode [ 22.919274][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.926301][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.933689][ T291] device bridge_slave_1 entered promiscuous mode [ 22.970057][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.977111][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.984609][ T289] device bridge_slave_0 entered promiscuous mode [ 22.993038][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.000158][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.007533][ T289] device bridge_slave_1 entered promiscuous mode [ 23.107562][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.114629][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.121934][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.128960][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.159162][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.166207][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.173565][ T290] device bridge_slave_0 entered promiscuous mode [ 23.180454][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.187478][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.194946][ T290] device bridge_slave_1 entered promiscuous mode [ 23.280857][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.287898][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.295160][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.302186][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.319641][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.327104][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.334679][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.342131][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.350501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.357832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.374344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.382570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.390805][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.397830][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.405267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.413645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.421798][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.428840][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.436445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.460243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.468445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.477028][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.484056][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.492070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.500209][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.507210][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.538100][ T288] device veth0_vlan entered promiscuous mode [ 23.546240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.554731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.562859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.570773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.578262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.586672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.594657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.602689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.610668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.621424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.629418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.636743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.652513][ T287] device veth0_vlan entered promiscuous mode [ 23.658927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.666471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.674673][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.681703][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.689572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.711679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.719995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.728418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.736637][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.743681][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.751967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.759859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.770142][ T287] device veth1_macvtap entered promiscuous mode [ 23.779585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.787219][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.795658][ T288] device veth1_macvtap entered promiscuous mode [ 23.806640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.815027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.823539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.831949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.840277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.848505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.856798][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.863831][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.871253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.892123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.900530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.900828][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 23.909126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.924761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.933113][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.940166][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.951786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.959288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.966715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.975117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.983310][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.990336][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.997748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.006210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.018522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.026652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.045616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.057333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.065722][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.072775][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.080569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.089208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.097544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.105701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.145493][ T290] device veth0_vlan entered promiscuous mode [ 24.152076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.159604][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.166973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.175410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.183534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.192749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.202199][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.210768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.221814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.230385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.261489][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.268882][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.370952][ T291] device veth0_vlan entered promiscuous mode [ 24.395708][ T290] device veth1_macvtap entered promiscuous mode [ 24.416356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.424821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.428050][ T316] using random self ethernet address [ 24.434070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.438182][ T316] using random host ethernet address [ 24.446587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.460114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.468187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.476364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.484372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 24.492705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.500796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.508736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.516688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.524650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.533006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.541361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.549530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.557644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.565260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.573170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.583389][ T289] device veth0_vlan entered promiscuous mode [ 24.595050][ T291] device veth1_macvtap entered promiscuous mode [ 24.602429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.609973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.617309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.625676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.634223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.644808][ T319] usb0: HOST MAC 16:b9:5b:09:b5:e3 [ 24.650448][ T319] usb0: MAC 6a:2a:b2:9a:b4:41 [ 24.655274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.664203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.673640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.682003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.699865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.708055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.716547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.718558][ T292] android_work: did not send uevent (0 0 0000000000000000) [ 24.725211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.760821][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.769297][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.795623][ T289] device veth1_macvtap entered promiscuous mode [ 24.814937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.829004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.830196][ T334] loop3: detected capacity change from 0 to 512 [ 24.847318][ T336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.856302][ T336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.871489][ T336] loop0: detected capacity change from 0 to 256 [ 24.875716][ T323] android_work: did not send uevent (0 0 0000000000000000) [ 24.924448][ T336] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x20f6b87c, utbl_chksum : 0xe619d30d) [ 24.945327][ T334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.968780][ T334] EXT4-fs (loop3): Test dummy encryption mode enabled [ 24.982665][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.993683][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.003615][ T334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.026867][ T345] netlink: 'syz.2.8': attribute type 3 has an invalid length. [ 25.070777][ T354] loop1: detected capacity change from 0 to 512 [ 25.081642][ T327] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.4: Directory hole found for htree leaf block 0 [ 25.109442][ T354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.121376][ T327] EXT4-fs (loop3): Remounting filesystem read-only [ 25.162038][ T354] EXT4-fs (loop1): Test dummy encryption mode enabled [ 25.169529][ T290] EXT4-fs (loop3): unmounting filesystem. [ 25.176167][ T354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.208089][ T363] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.212134][ T350] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.9: Directory hole found for htree leaf block 0 [ 25.241437][ T350] EXT4-fs (loop1): Remounting filesystem read-only [ 25.280434][ T291] EXT4-fs (loop1): unmounting filesystem. [ 25.286921][ T366] syz.4.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.308354][ T363] kvm [362]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc1) = 0xe50000000401 [ 25.317980][ T363] kvm [362]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc2) = 0xe50000000401 [ 25.325289][ T366] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5'. [ 25.347601][ T345] loop2: detected capacity change from 0 to 40427 [ 25.353657][ T363] kvm [362]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x11e) = 0xe50000000401 [ 25.361139][ T345] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 25.371072][ T345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.378445][ T363] kvm [362]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x186) = 0xe50000000401 [ 25.379880][ T345] F2FS-fs (loop2): Image doesn't support compression [ 25.393621][ T363] kvm [362]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x187) = 0xe50000000401 [ 25.395337][ T345] F2FS-fs (loop2): Image doesn't support compression [ 25.410227][ T363] kvm [362]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x1d9) = 0xe50000000401 [ 25.411847][ T345] F2FS-fs (loop2): invalid crc value [ 25.425927][ T345] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 25.428251][ T325] android_work: did not send uevent (0 0 0000000000000000) [ 25.489468][ T345] F2FS-fs (loop2): Start checkpoint disabled! [ 25.497415][ T345] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 25.505041][ T345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.512295][ T345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 25.541507][ T378] loop1: detected capacity change from 0 to 128 [ 25.546975][ T345] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 25.588028][ T310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.618531][ T380] loop3: detected capacity change from 0 to 512 [ 25.627448][ T380] EXT4-fs: Ignoring removed i_version option [ 25.641427][ T380] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.660547][ T380] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 25.675003][ T380] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.16: Failed to acquire dquot type 1 [ 25.686441][ T380] EXT4-fs (loop3): 1 truncate cleaned up [ 25.692342][ T380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.724345][ T290] EXT4-fs (loop3): unmounting filesystem. [ 25.815217][ T387] using random self ethernet address [ 25.820616][ T387] using random host ethernet address [ 25.827003][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 25.827015][ T28] audit: type=1400 audit(1786977209.723:163): avc: denied { read } for pid=386 comm="syz.3.17" name="UDC" dev="configfs" ino=16111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 25.870087][ T389] loop3: detected capacity change from 0 to 512 [ 25.896996][ T389] EXT4-fs: Ignoring removed i_version option [ 25.904442][ T309] kworker/u4:4: attempt to access beyond end of device [ 25.904442][ T309] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 25.918709][ T28] audit: type=1400 audit(1786977209.813:164): avc: denied { setopt } for pid=390 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.934549][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 25.939480][ T28] audit: type=1400 audit(1786977209.833:165): avc: denied { create } for pid=390 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.946806][ T389] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.976889][ T28] audit: type=1400 audit(1786977209.833:166): avc: denied { ioctl } for pid=390 comm="syz.4.20" path="socket:[16120]" dev="sockfs" ino=16120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.002192][ T28] audit: type=1400 audit(1786977209.833:167): avc: denied { bind } for pid=390 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.035701][ T28] audit: type=1400 audit(1786977209.833:168): avc: denied { ioctl } for pid=390 comm="syz.4.20" path="socket:[16121]" dev="sockfs" ino=16121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.063962][ T389] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 26.068439][ T396] loop2: detected capacity change from 0 to 128 [ 26.078974][ T389] Quota error (device loop3): write_blk: dquota write failed [ 26.099834][ T389] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 26.109415][ T389] Quota error (device loop3): write_blk: dquota write failed [ 26.119694][ T389] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 26.131450][ T389] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.18: Failed to acquire dquot type 1 [ 26.143746][ T389] EXT4-fs (loop3): 1 truncate cleaned up [ 26.143995][ T325] android_work: did not send uevent (0 0 0000000000000000) [ 26.150776][ T389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.184892][ T400] loop4: detected capacity change from 0 to 128 [ 26.221790][ T290] EXT4-fs (loop3): unmounting filesystem. [ 26.242056][ T325] android_work: did not send uevent (0 0 0000000000000000) [ 26.461628][ T409] loop1: detected capacity change from 0 to 128 [ 26.621793][ T410] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 272). There's a risk of filesystem corruption in case of system crash. [ 26.957900][ T414] ======================================================= [ 26.957900][ T414] WARNING: The mand mount option has been deprecated and [ 26.957900][ T414] and is ignored by this kernel. Remove the mand [ 26.957900][ T414] option from the mount to silence this warning. [ 26.957900][ T414] ======================================================= [ 27.024220][ T320] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.139657][ T310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.628708][ T323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.810104][ T323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.830957][ T323] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 27.846046][ T323] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 27.855509][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.863735][ T323] usb 2-1: Product: syz [ 27.868611][ T323] usb 2-1: Manufacturer: syz [ 27.874609][ T323] usb 2-1: SerialNumber: syz [ 27.919876][ T310] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.990680][ T436] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 272). There's a risk of filesystem corruption in case of system crash. [ 28.083931][ T323] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.091329][ T323] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 28.100107][ T323] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 28.108334][ T323] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 28.122093][ T323] usb 2-1: USB disconnect, device number 2 [ 28.349933][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.437016][ T440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.448463][ T440] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.456476][ T440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.469176][ T440] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.37: Directory hole found for htree leaf block 0 [ 28.482886][ T440] EXT4-fs (loop3): Remounting filesystem read-only [ 28.941185][ T453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.953580][ T453] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.974275][ T453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.990699][ T453] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.42: Directory hole found for htree leaf block 0 [ 29.005160][ T453] EXT4-fs (loop4): Remounting filesystem read-only [ 29.021421][ T289] EXT4-fs (loop4): unmounting filesystem. [ 29.171496][ T290] EXT4-fs (loop3): unmounting filesystem. [ 29.398702][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.448697][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.548696][ T6] usb 5-1: device descriptor read/64, error -71 [ 29.629987][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.638454][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 29.651016][ T39] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 29.660247][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.668308][ T39] usb 4-1: Product: syz [ 29.672567][ T39] usb 4-1: Manufacturer: syz [ 29.677196][ T39] usb 4-1: SerialNumber: syz [ 29.818686][ T6] usb 5-1: device descriptor read/64, error -71 [ 29.886457][ T39] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 29.893571][ T39] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 29.902215][ T39] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 29.910573][ T39] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 29.935149][ T39] usb 4-1: USB disconnect, device number 2 [ 29.976964][ T477] set_capacity_and_notify: 17 callbacks suppressed [ 29.976980][ T477] loop1: detected capacity change from 0 to 256 [ 30.022935][ T479] loop1: detected capacity change from 0 to 128 [ 30.088708][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.149365][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.238697][ T6] usb 5-1: device descriptor read/64, error -71 [ 30.480039][ T484] futex_wake_op: syz.3.55 tries to shift op by 144; fix this program [ 30.490386][ T484] loop3: detected capacity change from 0 to 256 [ 30.500854][ T484] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 30.508700][ T6] usb 5-1: device descriptor read/64, error -71 [ 30.638732][ T6] usb usb5-port1: attempt power cycle [ 30.644357][ T486] loop0: detected capacity change from 0 to 512 [ 30.664662][ T486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.676227][ T486] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.685881][ T486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.701535][ T486] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.56: Directory hole found for htree leaf block 0 [ 30.712780][ T494] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 30.715292][ T486] EXT4-fs (loop0): Remounting filesystem read-only [ 30.739419][ T288] EXT4-fs (loop0): unmounting filesystem. [ 30.754710][ T325] android_work: did not send uevent (0 0 0000000000000000) [ 30.833976][ T494] loop2: detected capacity change from 0 to 40427 [ 30.840936][ T494] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 30.848221][ T494] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.856689][ T494] F2FS-fs (loop2): Image doesn't support compression [ 30.863562][ T494] F2FS-fs (loop2): Image doesn't support compression [ 30.870973][ T494] F2FS-fs (loop2): invalid crc value [ 30.876993][ T494] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.906406][ T494] F2FS-fs (loop2): Start checkpoint disabled! [ 30.912870][ T494] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 30.920500][ T494] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.927558][ T494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 30.939087][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 30.939098][ T28] audit: type=1400 audit(1786977214.843:182): avc: denied { read } for pid=493 comm="syz.2.58" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.968508][ T28] audit: type=1400 audit(1786977214.843:183): avc: denied { open } for pid=493 comm="syz.2.58" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.991710][ T28] audit: type=1400 audit(1786977214.843:184): avc: denied { ioctl } for pid=493 comm="syz.2.58" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.022301][ T501] loop1: detected capacity change from 0 to 128 [ 31.058695][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 31.141827][ T504] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 31.228777][ T28] audit: type=1400 audit(1786977215.053:185): avc: denied { remove_name } for pid=493 comm="syz.2.58" name="bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.256833][ T28] audit: type=1400 audit(1786977215.053:186): avc: denied { rename } for pid=493 comm="syz.2.58" name="bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.396868][ T28] audit: type=1400 audit(1786977215.053:187): avc: denied { rmdir } for pid=493 comm="syz.2.58" name="file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.637533][ T510] loop3: detected capacity change from 0 to 1024 [ 31.644516][ T28] audit: type=1400 audit(1786977215.063:188): avc: denied { write } for pid=493 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.674214][ T510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.682234][ T510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.689332][ T510] EXT4-fs: Ignoring removed i_version option [ 31.695786][ T28] audit: type=1400 audit(1786977215.063:189): avc: denied { read } for pid=493 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.720951][ T510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.729653][ T510] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.752005][ T28] audit: type=1400 audit(1786977215.653:190): avc: denied { read append } for pid=509 comm="syz.3.63" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.775464][ T510] FAULT_INJECTION: forcing a failure. [ 31.775464][ T510] name failslab, interval 1, probability 0, space 0, times 1 [ 31.788210][ T510] CPU: 1 PID: 510 Comm: syz.3.63 Not tainted syzkaller #0 [ 31.795317][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.803990][ T28] audit: type=1400 audit(1786977215.673:191): avc: denied { open } for pid=509 comm="syz.3.63" path="/14/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.805370][ T510] Call Trace: [ 31.805377][ T510] [ 31.805384][ T510] __dump_stack+0x21/0x24 [ 31.805415][ T510] dump_stack_lvl+0x110/0x170 [ 31.805432][ T510] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.828902][ T6] usb 5-1: device descriptor read/8, error -71 [ 31.831235][ T510] ? __stack_depot_save+0x44d/0x490 [ 31.831260][ T510] dump_stack+0x15/0x24 [ 31.863550][ T510] should_fail_ex+0x3bf/0x510 [ 31.868246][ T510] ? __es_insert_extent+0x70e/0x1790 [ 31.873540][ T510] __should_failslab+0xac/0xf0 [ 31.878318][ T510] should_failslab+0x9/0x20 [ 31.882824][ T510] kmem_cache_alloc+0x3b/0x320 [ 31.887593][ T510] __es_insert_extent+0x70e/0x1790 [ 31.892720][ T510] ? _raw_write_lock+0x94/0xf0 [ 31.897465][ T510] ext4_es_insert_extent+0x53c/0x2d10 [ 31.902817][ T510] ? __cfi_ext4_es_insert_extent+0x10/0x10 [ 31.908601][ T510] ? _raw_read_unlock+0x25/0x40 [ 31.913432][ T510] ? ext4_es_find_extent_range+0xe7/0x2f0 [ 31.919131][ T510] ? __cfi_ext4_es_is_delayed+0x10/0x10 [ 31.924670][ T510] ext4_ext_map_blocks+0x1ebb/0x60e0 [ 31.929934][ T510] ? __cfi___xa_set_mark+0x10/0x10 [ 31.935022][ T510] ? __this_cpu_preempt_check+0x13/0x20 [ 31.940543][ T510] ? mem_cgroup_track_foreign_dirty_slowpath+0x513/0x920 [ 31.947552][ T510] ? __kasan_check_write+0x14/0x20 [ 31.948700][ T292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.952646][ T510] ? rwsem_read_trylock+0x2af/0x640 [ 31.952673][ T510] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 31.970907][ T510] ? ext4_es_lookup_extent+0x563/0x900 [ 31.976349][ T510] ext4_map_blocks+0x3b9/0x1a80 [ 31.981179][ T510] ? __kasan_check_write+0x14/0x20 [ 31.986269][ T510] ? _raw_spin_lock+0x94/0xf0 [ 31.989756][ T6] usb 5-1: device descriptor read/8, error -71 [ 31.990927][ T510] ? __cfi_ext4_map_blocks+0x10/0x10 [ 31.990950][ T510] ? __kasan_check_read+0x11/0x20 [ 32.007342][ T510] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 32.012963][ T510] ext4_alloc_file_blocks+0x372/0xb60 [ 32.018318][ T510] ? trace_ext4_fallocate_enter+0x130/0x130 [ 32.024192][ T510] ? mutex_unlock+0x8f/0x230 [ 32.028763][ T510] ext4_fallocate+0x8de/0x1dd0 [ 32.033508][ T510] ? selinux_file_permission+0x2a5/0x510 [ 32.039119][ T510] vfs_fallocate+0x4ca/0x5a0 [ 32.043687][ T510] __x64_sys_fallocate+0xc0/0x110 [ 32.048689][ T510] x64_sys_call+0x7fa/0x9a0 [ 32.053187][ T510] do_syscall_64+0x4c/0xa0 [ 32.057585][ T510] ? clear_bhb_loop+0x30/0x80 [ 32.062236][ T510] ? clear_bhb_loop+0x30/0x80 [ 32.066897][ T510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.072770][ T510] RIP: 0033:0x7ff9e019e0d9 [ 32.077176][ T510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.096762][ T510] RSP: 002b:00007ff9e0f96028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 32.105161][ T510] RAX: ffffffffffffffda RBX: 00007ff9e0425fa0 RCX: 00007ff9e019e0d9 [ 32.113121][ T510] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000004 [ 32.121069][ T510] RBP: 00007ff9e0f96090 R08: 0000000000000000 R09: 0000000000000000 [ 32.129020][ T510] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 32.136974][ T510] R13: 00007ff9e0426038 R14: 00007ff9e0425fa0 R15: 00007fff5ea4fb98 [ 32.138677][ T292] usb 1-1: Using ep0 maxpacket: 16 [ 32.144929][ T510] [ 32.156797][ T8] kworker/u4:0: attempt to access beyond end of device [ 32.156797][ T8] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.182265][ T290] EXT4-fs (loop3): unmounting filesystem. [ 32.226222][ T292] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.227590][ T523] loop3: detected capacity change from 0 to 128 [ 32.235102][ T524] loop1: detected capacity change from 0 to 128 [ 32.248039][ T292] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 32.273778][ T292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.290493][ T292] usb 1-1: Product: љ [ 32.297209][ T292] usb 1-1: Manufacturer: 悌㓹캅㸞⥝䓋ｯާꕀ渵覿釗쨚ᮄꋯ苕钼銿鱫磌ૃ섵漃 [ 32.302848][ T526] FAULT_INJECTION: forcing a failure. [ 32.302848][ T526] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.310029][ T292] usb 1-1: SerialNumber: ࠬ [ 32.326055][ T526] CPU: 1 PID: 526 Comm: syz.2.64 Not tainted syzkaller #0 [ 32.333167][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.343202][ T526] Call Trace: [ 32.346464][ T526] [ 32.349380][ T526] __dump_stack+0x21/0x24 [ 32.353715][ T526] dump_stack_lvl+0x110/0x170 [ 32.358415][ T526] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.363436][ T526] dump_stack+0x15/0x24 [ 32.367588][ T526] should_fail_ex+0x3bf/0x510 [ 32.372251][ T526] should_fail+0xb/0x10 [ 32.376401][ T526] should_fail_usercopy+0x1a/0x20 [ 32.381419][ T526] _copy_from_user+0x1e/0xc0 [ 32.386006][ T526] iovec_from_user+0x1aa/0x2e0 [ 32.390757][ T526] __import_iovec+0x6d/0x460 [ 32.395323][ T526] ? kstrtoull+0x137/0x1d0 [ 32.399721][ T526] import_iovec+0x7c/0xb0 [ 32.404042][ T526] ___sys_sendmsg+0x252/0x360 [ 32.408700][ T526] ? __sys_sendmsg+0x290/0x290 [ 32.413455][ T526] ? __kasan_check_write+0x14/0x20 [ 32.418546][ T526] ? proc_fail_nth_write+0x180/0x200 [ 32.423826][ T526] ? vfs_write+0xa51/0xd00 [ 32.428238][ T526] ? __fdget+0x19c/0x220 [ 32.432471][ T526] __x64_sys_sendmsg+0x20d/0x2e0 [ 32.437398][ T526] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 32.442855][ T526] ? __kasan_check_write+0x14/0x20 [ 32.447958][ T526] ? fpregs_restore_userregs+0x128/0x260 [ 32.453587][ T526] ? switch_fpu_return+0xe/0x10 [ 32.458422][ T526] x64_sys_call+0x171/0x9a0 [ 32.462911][ T526] do_syscall_64+0x4c/0xa0 [ 32.467306][ T526] ? clear_bhb_loop+0x30/0x80 [ 32.471962][ T526] ? clear_bhb_loop+0x30/0x80 [ 32.476630][ T526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.478706][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 32.482503][ T526] RIP: 0033:0x7efccf79e0d9 [ 32.494329][ T526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.513913][ T526] RSP: 002b:00007efcd06b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.519737][ T6] usb 5-1: device descriptor read/8, error -71 [ 32.522302][ T526] RAX: ffffffffffffffda RBX: 00007efccfa25fa0 RCX: 00007efccf79e0d9 [ 32.522317][ T526] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000004 [ 32.522328][ T526] RBP: 00007efcd06b9090 R08: 0000000000000000 R09: 0000000000000000 [ 32.522338][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.560260][ T526] R13: 00007efccfa26038 R14: 00007efccfa25fa0 R15: 00007fffe57883d8 [ 32.568229][ T526] [ 32.669713][ T6] usb 5-1: device descriptor read/8, error -71 [ 32.694366][ T533] loop2: detected capacity change from 0 to 16 [ 32.704485][ T533] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.788731][ T6] usb usb5-port1: unable to enumerate USB device [ 32.977091][ T498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.985644][ T498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.040788][ T498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.049312][ T498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.069464][ T292] usbhid 1-1:1.0: can't add hid device: -71 [ 33.075421][ T292] usbhid: probe of 1-1:1.0 failed with error -71 [ 33.090899][ T292] usb 1-1: USB disconnect, device number 2 [ 33.137915][ T535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.152025][ T535] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.163884][ T535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 33.196730][ T535] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.70: Directory hole found for htree leaf block 0 [ 33.215549][ T535] EXT4-fs (loop3): Remounting filesystem read-only [ 33.227253][ T290] EXT4-fs (loop3): unmounting filesystem. [ 33.295643][ T545] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.592935][ T549] EXT4-fs: Ignoring removed bh option [ 33.598873][ T549] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.610261][ T549] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.75: bg 0: block 393: padding at end of block bitmap is not set [ 33.632288][ T549] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.641374][ T549] EXT4-fs (loop2): 2 truncates cleaned up [ 33.647162][ T549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.666219][ T287] EXT4-fs (loop2): unmounting filesystem. [ 33.678747][ T553] FAULT_INJECTION: forcing a failure. [ 33.678747][ T553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.691924][ T553] CPU: 1 PID: 553 Comm: syz.2.76 Not tainted syzkaller #0 [ 33.699049][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.709102][ T553] Call Trace: [ 33.712366][ T553] [ 33.715284][ T553] __dump_stack+0x21/0x24 [ 33.719616][ T553] dump_stack_lvl+0x110/0x170 [ 33.724276][ T553] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.729285][ T553] dump_stack+0x15/0x24 [ 33.733420][ T553] should_fail_ex+0x3bf/0x510 [ 33.738077][ T553] should_fail+0xb/0x10 [ 33.742219][ T553] should_fail_usercopy+0x1a/0x20 [ 33.747229][ T553] _copy_from_user+0x1e/0xc0 [ 33.751801][ T553] __se_sys_memfd_create+0x12b/0x3c0 [ 33.757066][ T553] __x64_sys_memfd_create+0x5b/0x70 [ 33.762251][ T553] x64_sys_call+0x235/0x9a0 [ 33.766732][ T553] do_syscall_64+0x4c/0xa0 [ 33.771143][ T553] ? clear_bhb_loop+0x30/0x80 [ 33.775797][ T553] ? clear_bhb_loop+0x30/0x80 [ 33.780458][ T553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.786360][ T553] RIP: 0033:0x7efccf79e0d9 [ 33.790788][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.810398][ T553] RSP: 002b:00007efcd06b8e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 33.818818][ T553] RAX: ffffffffffffffda RBX: 00000000000004b4 RCX: 00007efccf79e0d9 [ 33.826779][ T553] RDX: 00007efcd06b8ee0 RSI: 0000000000000000 RDI: 00007efccf835204 [ 33.834734][ T553] RBP: 0000200000000c80 R08: 00000000ffffffff R09: 0000000000000000 [ 33.842685][ T553] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 33.850639][ T553] R13: 00007efcd06b8ee0 R14: 00007efcd06b8ea0 R15: 0000200000000700 [ 33.858601][ T553] [ 33.873668][ T562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.889911][ T562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.899081][ T562] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.925925][ T287] EXT4-fs (loop2): unmounting filesystem. [ 33.959142][ T6] android_work: did not send uevent (0 0 0000000000000000) [ 33.980143][ T574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.997201][ T574] EXT4-fs (loop2): unmounting filesystem. [ 34.748970][ T582] netlink: 72 bytes leftover after parsing attributes in process `syz.0.81'. [ 34.980157][ T598] set_capacity_and_notify: 7 callbacks suppressed [ 34.980172][ T598] loop1: detected capacity change from 0 to 512 [ 35.021020][ T598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.039449][ T598] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.054482][ T605] loop2: detected capacity change from 0 to 512 [ 35.058107][ T598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.080576][ T598] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.92: Directory hole found for htree leaf block 0 [ 35.095013][ T605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.94: bg 0: block 4: invalid block bitmap [ 35.096577][ T610] loop0: detected capacity change from 0 to 128 [ 35.107325][ T598] EXT4-fs (loop1): Remounting filesystem read-only [ 35.115440][ T605] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.94: Parent and EA inode have the same ino 15 [ 35.135710][ T610] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 35.138895][ T291] EXT4-fs (loop1): unmounting filesystem. [ 35.144409][ T605] EXT4-fs (loop2): 1 orphan inode deleted [ 35.150621][ T610] FAT-fs (loop0): Filesystem has been set read-only [ 35.155404][ T605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.217273][ T613] loop4: detected capacity change from 0 to 128 [ 35.262297][ T614] loop1: detected capacity change from 0 to 8192 [ 35.267553][ T613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.278927][ T613] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.311070][ T621] netlink: 88 bytes leftover after parsing attributes in process `syz.1.100'. [ 35.320193][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.335236][ T621] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 35.337544][ T289] EXT4-fs (loop4): unmounting filesystem. [ 35.349501][ T287] EXT4-fs (loop2): unmounting filesystem. [ 35.363605][ T626] loop1: detected capacity change from 0 to 256 [ 35.373598][ T626] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.388709][ T626] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 35.400694][ T626] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 35.503790][ T630] loop4: detected capacity change from 0 to 40427 [ 35.508691][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 35.515432][ T630] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 35.523510][ T630] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.532398][ T24] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 35.540663][ T24] usb 4-1: config 1 has no interface number 0 [ 35.546766][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.559092][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 35.569325][ T24] usb 4-1: config 1 interface 105 has no altsetting 0 [ 35.577712][ T24] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 35.591206][ T24] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 35.599386][ T24] usb 4-1: Product: syz [ 35.603615][ T24] usb 4-1: Manufacturer: syz [ 35.608231][ T24] usb 4-1: SerialNumber: syz [ 35.616128][ T602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.623714][ T629] loop4: detected capacity change from 0 to 512 [ 35.624225][ T602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.847119][ T650] loop2: detected capacity change from 0 to 512 [ 35.864422][ T650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.876181][ T650] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.884604][ T650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.897476][ T650] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.107: Directory hole found for htree leaf block 0 [ 35.912321][ T650] EXT4-fs (loop2): Remounting filesystem read-only [ 35.926068][ T287] EXT4-fs (loop2): unmounting filesystem. [ 35.926615][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.949182][ T655] af_packet: tpacket_rcv: packet too big, clamped from 5687 to 3956. macoff=92 [ 35.964595][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 35.964608][ T28] audit: type=1400 audit(1786977219.863:223): avc: denied { shutdown } for pid=659 comm="syz.2.111" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.007646][ T28] audit: type=1400 audit(1786977219.903:224): avc: denied { create } for pid=664 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.027098][ T665] loop2: detected capacity change from 0 to 1024 [ 36.028703][ T28] audit: type=1400 audit(1786977219.913:225): avc: denied { ioctl } for pid=664 comm="syz.2.113" path="socket:[17621]" dev="sockfs" ino=17621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.036039][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.058313][ T602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.064586][ T28] audit: type=1400 audit(1786977219.913:226): avc: denied { connect } for pid=664 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.090712][ T28] audit: type=1400 audit(1786977219.913:227): avc: denied { ioctl } for pid=664 comm="syz.2.113" path="socket:[17624]" dev="sockfs" ino=17624 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.090896][ T602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.123447][ T28] audit: type=1400 audit(1786977219.923:228): avc: denied { mount } for pid=654 comm="syz.4.109" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.139679][ T665] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.113: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.145565][ T671] xt_hashlimit: max too large, truncated to 1048576 [ 36.159009][ T670] xt_hashlimit: max too large, truncated to 1048576 [ 36.159584][ T665] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 36.180461][ T665] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.113: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.208803][ T665] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 36.227898][ T665] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.113: Failed to acquire dquot type 0 [ 36.248810][ T665] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 36.261265][ T665] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.113: mark_inode_dirty error [ 36.279134][ T675] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure [ 36.289824][ T665] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 36.309137][ T665] EXT4-fs (loop2): 1 orphan inode deleted [ 36.325751][ T665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.337408][ T8] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.360748][ T8] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 36.363936][ T28] audit: type=1400 audit(1786977220.263:229): avc: denied { setattr } for pid=664 comm="syz.2.113" path="/26/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.372864][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 36.398689][ T665] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz.2.113: Invalid inode table block 1 in block_group 0 [ 36.434392][ T665] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 36.552471][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 36.573150][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 36.600426][ T24] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:e0:e6:a3:4b:30 [ 36.792814][ T506] usb 4-1: USB disconnect, device number 3 [ 36.799361][ T506] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 36.859044][ T506] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.868535][ T506] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.887592][ T506] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 36.935164][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 37.128752][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 37.141792][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.161070][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.178155][ T24] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 37.194052][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 37.208566][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.222789][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.239451][ T24] usb 5-1: config 0 descriptor?? [ 37.420083][ T723] netlink: 'syz.0.122': attribute type 2 has an invalid length. [ 37.429032][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 37.703056][ T736] EXT4-fs: Ignoring removed orlov option [ 37.720070][ T736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.801095][ T736] tmpfs: Unknown parameter './file0/file0' [ 37.814047][ T291] EXT4-fs (loop1): unmounting filesystem. [ 37.859319][ T686] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4605: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 37.874430][ T310] udevd[310]: incorrect ext4 checksum on /dev/loop4 [ 37.885346][ T686] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 37.895937][ T310] udevd[310]: incorrect ext4 checksum on /dev/loop4 [ 37.909466][ T24] usb 5-1: USB disconnect, device number 6 [ 37.928581][ T744] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.131: Invalid inode bitmap blk 4 in block_group 0 [ 37.941395][ T744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.029070][ T734] F2FS-fs (loop0): invalid crc value [ 38.036080][ T734] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.069022][ T734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 38.098781][ T668] Bluetooth: hci0: command 0x1003 tx timeout [ 38.098777][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.100868][ T734] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753 [ 38.124394][ T287] EXT4-fs (loop2): unmounting filesystem. [ 38.130406][ T287] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 38.143702][ T287] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 38.153358][ T287] EXT4-fs error (device loop2): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 38.218735][ T292] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.333800][ T760] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.345903][ T760] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.353670][ T760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.370246][ T290] EXT4-fs (loop3): unmounting filesystem. [ 38.398678][ T506] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.399691][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.417247][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.441550][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 38.457083][ T292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.471135][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.480237][ T292] usb 2-1: config 0 descriptor?? [ 38.589856][ T506] usb 1-1: Using ep0 maxpacket: 8 [ 38.597072][ T506] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.608345][ T506] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 38.617883][ T506] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 38.640886][ T506] usb 1-1: config 4 has no interface number 0 [ 38.667857][ T506] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 38.706242][ T506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.748310][ T506] usb 1-1: Product: syz [ 38.752738][ T506] usb 1-1: Manufacturer: syz [ 38.757468][ T506] usb 1-1: SerialNumber: syz [ 38.899320][ T320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.941297][ T292] usbhid 2-1:0.0: can't add hid device: -71 [ 38.947306][ T292] usbhid: probe of 2-1:0.0 failed with error -71 [ 38.955171][ T292] usb 2-1: USB disconnect, device number 3 [ 38.977912][ T734] F2FS-fs (loop0): sanity_check_inode: inode (ino=8) is with extra_attr, but extra_attr feature is off [ 39.016334][ T506] usb 1-1: USB disconnect, device number 3 [ 39.155755][ T789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.167317][ T789] EXT4-fs (loop2): Test dummy encryption mode enabled [ 39.175296][ T789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.192149][ T287] EXT4-fs (loop2): unmounting filesystem. [ 39.215817][ T794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=794 comm=syz.2.148 [ 39.280500][ T804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.289539][ T804] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.316596][ T287] EXT4-fs (loop2): unmounting filesystem. [ 39.353603][ T812] EXT4-fs: Ignoring removed bh option [ 39.366842][ T812] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.379246][ T812] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.154: inode has both inline data and extents flags [ 39.392518][ T812] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.154: couldn't read orphan inode 15 (err -117) [ 39.406508][ T812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.449958][ T291] EXT4-fs (loop1): unmounting filesystem. [ 39.465554][ T825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.477396][ T825] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.491414][ T825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.500524][ T290] EXT4-fs (loop3): unmounting filesystem. [ 39.511708][ T825] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.157: Directory hole found for htree leaf block 0 [ 39.538248][ T825] EXT4-fs (loop1): Remounting filesystem read-only [ 39.555108][ T830] can0: slcan on ttyS3. [ 39.591459][ T291] EXT4-fs (loop1): unmounting filesystem. [ 39.644407][ T829] can0 (unregistered): slcan off ttyS3. [ 39.705888][ T842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.778398][ T852] FAT-fs (loop2): Directory bread(block 64) failed [ 39.785021][ T852] FAT-fs (loop2): Directory bread(block 65) failed [ 39.791606][ T852] FAT-fs (loop2): Directory bread(block 66) failed [ 39.798107][ T852] FAT-fs (loop2): Directory bread(block 67) failed [ 39.804666][ T852] FAT-fs (loop2): Directory bread(block 68) failed [ 39.811190][ T852] FAT-fs (loop2): Directory bread(block 69) failed [ 39.817723][ T852] FAT-fs (loop2): Directory bread(block 70) failed [ 39.824264][ T852] FAT-fs (loop2): Directory bread(block 71) failed [ 39.830810][ T852] FAT-fs (loop2): Directory bread(block 72) failed [ 39.837332][ T852] FAT-fs (loop2): Directory bread(block 73) failed [ 39.873248][ T291] EXT4-fs (loop1): unmounting filesystem. [ 40.202502][ T863] set_capacity_and_notify: 16 callbacks suppressed [ 40.202517][ T863] loop4: detected capacity change from 0 to 512 [ 40.236405][ T863] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.168: Invalid inode bitmap blk 4 in block_group 0 [ 40.249239][ T863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.295149][ T879] loop1: detected capacity change from 0 to 128 [ 40.319744][ T879] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 40.327849][ T879] FAT-fs (loop1): Filesystem has been set read-only [ 40.355460][ T886] loop1: detected capacity change from 0 to 1024 [ 40.380466][ T886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.407724][ T291] EXT4-fs (loop1): unmounting filesystem. [ 40.528721][ T506] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.532153][ T907] loop2: detected capacity change from 0 to 128 [ 40.570279][ T896] loop1: detected capacity change from 0 to 256 [ 40.578036][ T896] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.589417][ T896] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 40.604735][ T745] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.645401][ T896] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.714759][ T919] fuse: Bad value for 'fd' [ 40.720218][ T919] fuse: Unknown parameter '0000000000000000000018446744073709551615' [ 40.729844][ T506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.730666][ T921] loop3: detected capacity change from 0 to 512 [ 40.747904][ T506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.750516][ T908] incfs: ino conflict with backing FS 1 [ 40.765878][ T506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 40.769491][ T921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.776935][ T506] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.801393][ T921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.808959][ T506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.812605][ T921] EXT4-fs (loop3): 1 truncate cleaned up [ 40.826817][ T921] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.838777][ T506] usb 5-1: config 0 descriptor?? [ 40.878995][ T921] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Out of memory [ 40.889280][ T921] EXT4-fs (loop3): Remounting filesystem read-only [ 40.895838][ T921] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #15: comm syz.3.181: mark_inode_dirty error [ 40.907525][ T921] EXT4-fs (loop3): Remounting filesystem read-only [ 40.914420][ T921] EXT4-fs error (device loop3): ext4_get_max_inline_size:116: inode #15: comm syz.3.181: can't get inode location 15 [ 40.927084][ T921] EXT4-fs (loop3): Remounting filesystem read-only [ 40.937296][ T921] ext4: Unknown parameter 'checkpoint' [ 40.962321][ T290] EXT4-fs (loop3): unmounting filesystem. [ 41.031258][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 41.031271][ T28] audit: type=1400 audit(1786977224.933:283): avc: denied { remount } for pid=930 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.070385][ T28] audit: type=1400 audit(1786977224.963:284): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.087645][ T922] loop0: detected capacity change from 0 to 40427 [ 41.104933][ T922] F2FS-fs (loop0): invalid crc value [ 41.120814][ T922] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.128784][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 41.155875][ T922] F2FS-fs (loop0): Start checkpoint disabled! [ 41.162928][ T922] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 41.171091][ T922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 41.222545][ T947] futex_wake_op: syz.3.188 tries to shift op by 144; fix this program [ 41.240371][ T947] loop3: detected capacity change from 0 to 256 [ 41.256546][ T506] usbhid 5-1:0.0: can't add hid device: -71 [ 41.265146][ T947] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 41.298713][ T24] usb 2-1: device descriptor read/64, error -71 [ 41.338485][ T506] usbhid: probe of 5-1:0.0 failed with error -71 [ 41.437456][ T28] audit: type=1400 audit(1786977225.333:285): avc: denied { read write open } for pid=918 comm="syz.0.182" path="/32/file1/file2" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.468995][ T922] syz.0.182: attempt to access beyond end of device [ 41.468995][ T922] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.483213][ T506] usb 5-1: USB disconnect, device number 7 [ 41.508040][ T922] syz.0.182: attempt to access beyond end of device [ 41.508040][ T922] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 41.522491][ T922] syz.0.182: attempt to access beyond end of device [ 41.522491][ T922] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 41.537417][ T922] syz.0.182: attempt to access beyond end of device [ 41.537417][ T922] loop0: rw=2049, sector=45120, nr_sectors = 32 limit=40427 [ 41.628761][ T24] usb 2-1: device descriptor read/64, error -71 [ 41.874361][ T309] kworker/u4:4: attempt to access beyond end of device [ 41.874361][ T309] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 41.918666][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 41.932152][ T289] EXT4-fs (loop4): unmounting filesystem. [ 41.944063][ T28] audit: type=1400 audit(1786977225.843:286): avc: denied { remove_name } for pid=955 comm="syz.0.191" name="ecm.usb0" dev="configfs" ino=17996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.964133][ T958] loop4: detected capacity change from 0 to 2048 [ 41.982009][ T28] audit: type=1400 audit(1786977225.843:287): avc: denied { getopt } for pid=957 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.001401][ T28] audit: type=1400 audit(1786977225.843:288): avc: denied { create } for pid=957 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 42.048143][ T28] audit: type=1400 audit(1786977225.933:289): avc: denied { getopt } for pid=963 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.049158][ T958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.086918][ T958] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.100332][ T24] usb 2-1: device descriptor read/64, error -71 [ 42.197639][ T28] audit: type=1400 audit(1786977226.093:290): avc: denied { read } for pid=957 comm="syz.4.192" dev="sockfs" ino=18034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.254528][ T958] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.192: bg 0: block 345: padding at end of block bitmap is not set [ 42.269450][ T958] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1647 with error 28 [ 42.282411][ T958] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.282411][ T958] [ 42.292204][ T958] EXT4-fs (loop4): Total free blocks count 0 [ 42.305100][ T28] audit: type=1400 audit(1786977226.203:291): avc: denied { ioctl } for pid=957 comm="syz.4.192" path="/26/file0/file1" dev="loop4" ino=15 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.305107][ T958] EXT4-fs (loop4): Free/Dirty block details [ 42.305121][ T958] EXT4-fs (loop4): free_blocks=0 [ 42.348703][ T958] EXT4-fs (loop4): dirty_blocks=1648 [ 42.354074][ T958] EXT4-fs (loop4): Block reservation details [ 42.360175][ T958] EXT4-fs (loop4): i_reserved_data_blocks=103 [ 42.368683][ T24] usb 2-1: device descriptor read/64, error -71 [ 42.399101][ T980] loop0: detected capacity change from 0 to 32768 [ 42.439094][ T980] loop0: p1 p3 < > [ 42.489549][ T24] usb usb2-port1: attempt power cycle [ 42.501674][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1663 with max blocks 1 with error 28 [ 42.554644][ T993] mmap: syz.4.204 (993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.567013][ T990] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.203: Invalid inode bitmap blk 4 in block_group 0 [ 42.589000][ T990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.635980][ T745] udevd[745]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.636017][ T310] udevd[310]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.888687][ T323] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.908684][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 42.939887][ T24] usb 2-1: device descriptor read/8, error -71 [ 43.069757][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.080727][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.090642][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 43.101700][ T323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.110848][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.119268][ T24] usb 2-1: device descriptor read/8, error -71 [ 43.126107][ T323] usb 3-1: config 0 descriptor?? [ 43.319102][ T28] audit: type=1400 audit(1786977227.223:292): avc: denied { write } for pid=1006 comm="syz.3.209" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.388674][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 43.429995][ T24] usb 2-1: device descriptor read/8, error -71 [ 43.545123][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 43.562532][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 43.653324][ T24] usb 2-1: device descriptor read/8, error -71 [ 43.661730][ T323] usb 3-1: USB disconnect, device number 2 [ 43.740919][ T1018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.750707][ T1018] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.213: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 43.778761][ T24] usb usb2-port1: unable to enumerate USB device [ 43.785564][ T291] EXT4-fs (loop1): unmounting filesystem. [ 43.806289][ T1023] binder: 1022:1023 ioctl 40046210 0 returned -14 [ 43.812997][ T1023] binder: 1022:1023 ioctl 4030582a 200000000000 returned -22 [ 43.848747][ T872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 43.940077][ T1035] FAULT_INJECTION: forcing a failure. [ 43.940077][ T1035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.953610][ T1035] CPU: 0 PID: 1035 Comm: syz.4.219 Not tainted syzkaller #0 [ 43.960922][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.970988][ T1035] Call Trace: [ 43.974274][ T1035] [ 43.977206][ T1035] __dump_stack+0x21/0x24 [ 43.981549][ T1035] dump_stack_lvl+0x110/0x170 [ 43.986239][ T1035] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.991275][ T1035] dump_stack+0x15/0x24 [ 43.995434][ T1035] should_fail_ex+0x3bf/0x510 [ 44.000118][ T1035] should_fail+0xb/0x10 [ 44.001352][ T1007] F2FS-fs (loop3): invalid crc value [ 44.004271][ T1035] should_fail_usercopy+0x1a/0x20 [ 44.004292][ T1035] _copy_from_user+0x1e/0xc0 [ 44.004312][ T1035] iovec_from_user+0x1aa/0x2e0 [ 44.023900][ T1035] __import_iovec+0x6d/0x460 [ 44.028499][ T1035] ? kstrtoull+0x137/0x1d0 [ 44.033009][ T1035] import_iovec+0x7c/0xb0 [ 44.037351][ T1035] ___sys_sendmsg+0x252/0x360 [ 44.042040][ T1035] ? __sys_sendmsg+0x290/0x290 [ 44.042328][ T1007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.046807][ T1035] ? __kasan_check_write+0x14/0x20 [ 44.046829][ T1035] ? proc_fail_nth_write+0x180/0x200 [ 44.046849][ T1035] ? vfs_write+0xa51/0xd00 [ 44.067832][ T1035] ? __fdget+0x19c/0x220 [ 44.072083][ T1035] __x64_sys_sendmsg+0x20d/0x2e0 [ 44.077030][ T1035] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.082496][ T1035] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.088573][ T1035] x64_sys_call+0x171/0x9a0 [ 44.093071][ T1035] do_syscall_64+0x4c/0xa0 [ 44.097488][ T1035] ? clear_bhb_loop+0x30/0x80 [ 44.102151][ T1035] ? clear_bhb_loop+0x30/0x80 [ 44.106816][ T1035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.112710][ T1035] RIP: 0033:0x7f37ecd9e0d9 [ 44.117122][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.136720][ T1035] RSP: 002b:00007f37edbc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.145124][ T1035] RAX: ffffffffffffffda RBX: 00007f37ed025fa0 RCX: 00007f37ecd9e0d9 [ 44.153082][ T1035] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 44.161035][ T1035] RBP: 00007f37edbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 44.168989][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.176942][ T1035] R13: 00007f37ed026038 R14: 00007f37ed025fa0 R15: 00007ffe98814068 [ 44.184898][ T1035] [ 44.189102][ T287] EXT4-fs (loop2): unmounting filesystem. [ 44.226729][ T1007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 44.294545][ T1055] FAT-fs (loop0): Directory bread(block 1285) failed [ 44.306912][ T1055] FAT-fs (loop0): Directory bread(block 1286) failed [ 44.313830][ T1055] FAT-fs (loop0): Directory bread(block 1287) failed [ 44.337888][ T1007] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 44.338001][ T1055] FAT-fs (loop0): Directory bread(block 1288) failed [ 44.364881][ T1007] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 44.462326][ T1070] Bluetooth: ISO socket layer initialized [ 44.469787][ T1070] Zero length message leads to an empty skb [ 44.478087][ T1070] xt_hashlimit: size too large, truncated to 1048576 [ 44.709093][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.058686][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 45.065073][ T19] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 45.076481][ T19] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 8871, setting to 1024 [ 45.087826][ T19] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 45.100859][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.107481][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.116533][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.125987][ T19] usb 1-1: config 0 descriptor?? [ 45.189441][ T1087] FAULT_INJECTION: forcing a failure. [ 45.189441][ T1087] name failslab, interval 1, probability 0, space 0, times 0 [ 45.202389][ T1087] CPU: 0 PID: 1087 Comm: syz.1.236 Not tainted syzkaller #0 [ 45.209679][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.219722][ T1087] Call Trace: [ 45.222984][ T1087] [ 45.225899][ T1087] __dump_stack+0x21/0x24 [ 45.230222][ T1087] dump_stack_lvl+0x110/0x170 [ 45.234885][ T1087] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.239902][ T1087] ? 0xffffffffa00040c0 [ 45.244044][ T1087] dump_stack+0x15/0x24 [ 45.248193][ T1087] should_fail_ex+0x3bf/0x510 [ 45.252856][ T1087] __should_failslab+0xac/0xf0 [ 45.257605][ T1087] should_failslab+0x9/0x20 [ 45.262092][ T1087] __kmem_cache_alloc_node+0x3d/0x2d0 [ 45.267453][ T1087] ? kvmalloc_node+0x28a/0x460 [ 45.272199][ T1087] ? kvmalloc_node+0x28a/0x460 [ 45.276946][ T1087] __kmalloc_node+0xa2/0x1e0 [ 45.281522][ T1087] kvmalloc_node+0x28a/0x460 [ 45.286093][ T1087] ? __cfi_kvmalloc_node+0x10/0x10 [ 45.291189][ T1087] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 45.296981][ T1087] __kvm_mmu_topup_memory_cache+0x30b/0x490 [ 45.302864][ T1087] ? __cfi_mutex_unlock+0x10/0x10 [ 45.307877][ T1087] kvm_mmu_topup_memory_cache+0x20/0x30 [ 45.313412][ T1087] kvm_mmu_load+0x99/0x2570 [ 45.317900][ T1087] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 45.323342][ T1087] ? queue_delayed_work_on+0x10d/0x160 [ 45.328791][ T1087] ? kvm_apic_has_interrupt+0x776/0x780 [ 45.334322][ T1087] vcpu_enter_guest+0x4d3b/0x7050 [ 45.339335][ T1087] ? __cfi_avc_has_perm+0x10/0x10 [ 45.344344][ T1087] ? pvclock_gtod_update_fn+0x270/0x270 [ 45.349876][ T1087] ? 0xffffffffa00040c0 [ 45.354017][ T1087] ? is_bpf_text_address+0x177/0x190 [ 45.359290][ T1087] ? kernel_text_address+0xa0/0xd0 [ 45.364390][ T1087] ? __kernel_text_address+0xd/0x30 [ 45.369575][ T1087] ? unwind_get_return_address+0x4d/0x90 [ 45.375194][ T1087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 45.381334][ T1087] ? arch_stack_walk+0xfc/0x150 [ 45.386179][ T1087] ? stack_trace_save+0xa6/0xf0 [ 45.391014][ T1087] ? vmx_vcpu_pi_load+0x14c/0x840 [ 45.396026][ T1087] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 45.401380][ T1087] ? _parse_integer_limit+0x18e/0x1d0 [ 45.406737][ T1087] ? __asan_set_shadow_00+0xe/0x10 [ 45.411839][ T1087] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 45.416676][ T1087] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 45.421872][ T1087] ? __this_cpu_preempt_check+0x13/0x20 [ 45.427403][ T1087] ? xfd_validate_state+0x70/0x150 [ 45.432505][ T1087] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 45.437774][ T1087] ? __local_bh_enable_ip+0x58/0x80 [ 45.442959][ T1087] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 45.448492][ T1087] kvm_vcpu_ioctl+0x8ed/0xc00 [ 45.453162][ T1087] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.458351][ T1087] ? selinux_file_ioctl+0x3ad/0x4c0 [ 45.463545][ T1087] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 45.469078][ T1087] ? mutex_unlock+0x8f/0x230 [ 45.473656][ T1087] ? __cfi_mutex_unlock+0x10/0x10 [ 45.478668][ T1087] ? __fget_files+0x2d1/0x330 [ 45.483328][ T1087] ? security_file_ioctl+0x95/0xc0 [ 45.488429][ T1087] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.493617][ T1087] __se_sys_ioctl+0x12f/0x1b0 [ 45.498279][ T1087] __x64_sys_ioctl+0x7b/0x90 [ 45.502853][ T1087] x64_sys_call+0x58b/0x9a0 [ 45.507353][ T1087] do_syscall_64+0x4c/0xa0 [ 45.511756][ T1087] ? clear_bhb_loop+0x30/0x80 [ 45.516589][ T1087] ? clear_bhb_loop+0x30/0x80 [ 45.521255][ T1087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.527136][ T1087] RIP: 0033:0x7fcf1079e0d9 [ 45.531540][ T1087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.551128][ T1087] RSP: 002b:00007fcf11668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.559537][ T1087] RAX: ffffffffffffffda RBX: 00007fcf10a25fa0 RCX: 00007fcf1079e0d9 [ 45.567502][ T1087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 45.575458][ T1087] RBP: 00007fcf11668090 R08: 0000000000000000 R09: 0000000000000000 [ 45.583415][ T1087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.591370][ T1087] R13: 00007fcf10a26038 R14: 00007fcf10a25fa0 R15: 00007ffc8fc91f08 [ 45.599334][ T1087] [ 45.617812][ T1090] set_capacity_and_notify: 10 callbacks suppressed [ 45.617829][ T1090] loop4: detected capacity change from 0 to 256 [ 45.670509][ T1098] loop4: detected capacity change from 0 to 1024 [ 45.695599][ T1098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.704999][ T1098] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.725092][ T289] EXT4-fs (loop4): unmounting filesystem. [ 45.834895][ T19] hid (null): nested delimiters [ 45.857493][ T19] hid (null): unknown global tag 0xe [ 45.863716][ T19] hid (null): unknown global tag 0xd [ 45.872365][ T19] hid (null): unknown global tag 0xfe [ 45.883705][ T1115] loop3: detected capacity change from 0 to 128 [ 45.886097][ T1117] FAULT_INJECTION: forcing a failure. [ 45.886097][ T1117] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.909105][ T323] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 45.930251][ T1117] CPU: 1 PID: 1117 Comm: syz.1.247 Not tainted syzkaller #0 [ 45.937549][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.947602][ T1117] Call Trace: [ 45.950880][ T1117] [ 45.953807][ T1117] __dump_stack+0x21/0x24 [ 45.958143][ T1117] dump_stack_lvl+0x110/0x170 [ 45.962814][ T1117] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.967837][ T1117] ? get_page_from_freelist+0x2ca9/0x2d20 [ 45.973560][ T1117] dump_stack+0x15/0x24 [ 45.977716][ T1117] should_fail_ex+0x3bf/0x510 [ 45.982387][ T1117] should_fail_alloc_page+0x61/0x90 [ 45.987597][ T1117] prepare_alloc_pages+0x131/0x570 [ 45.992719][ T1117] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 45.997920][ T1117] __alloc_pages+0x15b/0x610 [ 46.002521][ T1117] ? __cfi___alloc_pages+0x10/0x10 [ 46.007642][ T1117] ? __alloc_pages+0x1fa/0x610 [ 46.012849][ T1117] ? __cfi___alloc_pages+0x10/0x10 [ 46.017971][ T1117] ? mas_store_prealloc+0x241/0x3c0 [ 46.023177][ T1117] ? uprobe_mmap+0x181/0x1150 [ 46.027863][ T1117] __pmd_alloc+0xa1/0x4b0 [ 46.027891][ T1117] ? __kasan_check_write+0x14/0x20 [ 46.037306][ T1117] ? __cfi__raw_spin_lock+0x10/0x10 [ 46.037330][ T1117] ? __cfi___pmd_alloc+0x10/0x10 [ 46.037344][ T1117] ? uprobe_mmap+0x181/0x1150 [ 46.037359][ T1117] ? __kasan_check_read+0x11/0x20 [ 46.037376][ T1117] handle_mm_fault+0xa7a/0x26b0 [ 46.061935][ T1117] ? inode_to_bdi+0x69/0xf0 [ 46.065658][ T1118] loop4: detected capacity change from 0 to 256 [ 46.066445][ T1117] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.077219][ T1118] FAT-fs (loop4): Directory bread(block 64) failed [ 46.077921][ T1117] ? mtree_load+0x539/0x740 [ 46.084450][ T1118] FAT-fs (loop4): Directory bread(block 65) failed [ 46.088882][ T1117] __get_user_pages+0x34b/0xdb0 [ 46.088907][ T1117] ? populate_vma_page_range+0x120/0x120 [ 46.088924][ T1117] ? do_mmap+0x8bd/0xdd0 [ 46.095447][ T1118] FAT-fs (loop4): Directory bread(block 66) failed [ 46.100222][ T1117] __mm_populate+0x2ea/0x430 [ 46.100245][ T1117] ? __cfi___mm_populate+0x10/0x10 [ 46.105854][ T1118] FAT-fs (loop4): Directory bread(block 67) failed [ 46.110064][ T1117] __se_sys_remap_file_pages+0x685/0x800 [ 46.110093][ T1117] ? __x64_sys_remap_file_pages+0xd0/0xd0 [ 46.116598][ T1118] FAT-fs (loop4): Directory bread(block 68) failed [ 46.121126][ T1117] ? __cfi_ksys_write+0x10/0x10 [ 46.121145][ T1117] __x64_sys_remap_file_pages+0xbf/0xd0 [ 46.126231][ T1118] FAT-fs (loop4): Directory bread(block 69) failed [ 46.132699][ T1117] x64_sys_call+0x798/0x9a0 [ 46.138342][ T1118] FAT-fs (loop4): Directory bread(block 70) failed [ 46.144008][ T1117] do_syscall_64+0x4c/0xa0 [ 46.144028][ T1117] ? clear_bhb_loop+0x30/0x80 [ 46.144041][ T1117] ? clear_bhb_loop+0x30/0x80 [ 46.144054][ T1117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.150549][ T1118] FAT-fs (loop4): Directory bread(block 71) failed [ 46.155356][ T1117] RIP: 0033:0x7fcf1079e0d9 [ 46.160921][ T1118] FAT-fs (loop4): Directory bread(block 72) failed [ 46.167345][ T1117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.171844][ T1118] FAT-fs (loop4): Directory bread(block 73) failed [ 46.178293][ T1117] RSP: 002b:00007fcf11668028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 46.249575][ T1117] RAX: ffffffffffffffda RBX: 00007fcf10a25fa0 RCX: 00007fcf1079e0d9 [ 46.257532][ T1117] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 46.265483][ T1117] RBP: 00007fcf11668090 R08: 0000000000000000 R09: 0000000000000000 [ 46.273435][ T1117] R10: 0000000000000d82 R11: 0000000000000246 R12: 0000000000000002 [ 46.281388][ T1117] R13: 00007fcf10a26038 R14: 00007fcf10a25fa0 R15: 00007ffc8fc91f08 [ 46.289343][ T1117] [ 46.297597][ T6] usb 1-1: USB disconnect, device number 4 [ 46.327327][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 46.327342][ T28] audit: type=1400 audit(1786977230.223:302): avc: denied { ioctl } for pid=1121 comm="syz.1.248" path="socket:[19150]" dev="sockfs" ino=19150 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.327399][ T1122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 46.370047][ T28] audit: type=1400 audit(1786977230.273:303): avc: denied { write } for pid=1121 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.370911][ T1122] loop1: detected capacity change from 0 to 128 [ 46.400907][ T323] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 46.410323][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.420737][ T323] usb 3-1: config 0 descriptor?? [ 46.710448][ T28] audit: type=1326 audit(1786977230.613:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.735292][ T28] audit: type=1326 audit(1786977230.613:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.760834][ T28] audit: type=1326 audit(1786977230.613:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.784504][ T1134] loop4: detected capacity change from 0 to 256 [ 46.786045][ T28] audit: type=1326 audit(1786977230.613:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.816406][ T28] audit: type=1326 audit(1786977230.613:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.841087][ T28] audit: type=1326 audit(1786977230.613:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.866672][ T28] audit: type=1326 audit(1786977230.613:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.891824][ T28] audit: type=1326 audit(1786977230.613:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1091 comm="syz.2.238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efccf79e0d9 code=0x7ffc0000 [ 46.941558][ T1138] loop4: detected capacity change from 0 to 2048 [ 46.949492][ T1138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.961454][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 46.964732][ T1138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.967463][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 46.987426][ T323] usb 3-1: USB disconnect, device number 3 [ 47.016483][ T1148] syz.0.256 uses obsolete (PF_INET,SOCK_PACKET) [ 47.038426][ T1150] loop0: detected capacity change from 0 to 512 [ 47.048079][ T1150] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.257: iget: bad i_size value: 38620345925642 [ 47.061008][ T1150] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.257: couldn't read orphan inode 15 (err -117) [ 47.073465][ T1150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.285602][ T1158] loop1: detected capacity change from 0 to 128 [ 47.295145][ T1158] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 47.303683][ T1158] FAT-fs (loop1): Filesystem has been set read-only [ 47.308762][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 47.310983][ T1158] FAT-fs (loop1): error, clusters badly computed (0 != 1) [ 47.324912][ T1158] FAT-fs (loop1): error, clusters badly computed (1 != 2) [ 47.332273][ T1158] FAT-fs (loop1): error, clusters badly computed (2 != 3) [ 47.339422][ T1158] FAT-fs (loop1): error, clusters badly computed (3 != 4) [ 47.346536][ T1158] FAT-fs (loop1): error, clusters badly computed (4 != 5) [ 47.353868][ T1158] FAT-fs (loop1): error, clusters badly computed (5 != 6) [ 47.361037][ T1158] FAT-fs (loop1): error, clusters badly computed (6 != 7) [ 47.383408][ T1161] loop1: detected capacity change from 0 to 256 [ 47.391955][ T1161] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 47.404066][ T586] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.429060][ T1161] loop1: [ 47.433843][ T1161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 47.490272][ T6] usb 5-1: config 1 interface 0 altsetting 110 bulk endpoint 0x1 has invalid maxpacket 1024 [ 47.500956][ T6] usb 5-1: config 1 interface 0 altsetting 110 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.514036][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 47.521549][ T745] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.522906][ T6] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 47.541974][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.550718][ T6] usb 5-1: Product: Б [ 47.555061][ T6] usb 5-1: Manufacturer: ј [ 47.559921][ T6] usb 5-1: SerialNumber: 陥䬓諭嗶ꦰ⼘䞕䰶븗衞儨鲃ᢆ坞ﶋ棉樕漞 [ 47.570455][ T1138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 47.577609][ T1138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 47.588663][ T586] usb 4-1: Using ep0 maxpacket: 16 [ 47.597228][ T586] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.605870][ T586] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.616103][ T586] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.629739][ T586] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 47.648252][ T586] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 47.661833][ T1164] EXT4-fs error (device sda1): __ext4_new_inode:1291: comm syz-executor: failed to insert inode 105: doubly allocated? [ 47.678369][ T586] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.687199][ T1165] EXT4-fs error (device sda1): __ext4_new_inode:1291: comm syz-executor: failed to insert inode 8193: doubly allocated? [ 47.694306][ T586] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 47.714757][ T308] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 47.727389][ T586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.736045][ T308] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 1 with error 28 [ 47.750756][ T308] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.750756][ T308] [ 47.751754][ T586] usb 4-1: Product: syz [ 47.765494][ T586] usb 4-1: Manufacturer: syz [ 47.766557][ T308] EXT4-fs (loop0): Total free blocks count 0 [ 47.770459][ T586] usb 4-1: SerialNumber: syz [ 47.777207][ T308] EXT4-fs (loop0): Free/Dirty block details [ 47.780837][ T1163] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 47.786988][ T1166] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 47.801887][ T1163] File: /dev/sda1 PID: 1163 Comm: syz.2.263 [ 47.811780][ T308] EXT4-fs (loop0): free_blocks=0 [ 47.817486][ T1138] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 5: comm syz.4.253: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 47.821988][ T308] EXT4-fs (loop0): dirty_blocks=1 [ 47.845704][ T1138] EXT4-fs (loop4): Remounting filesystem read-only [ 47.855075][ T1138] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 47.871938][ T308] EXT4-fs (loop0): Block reservation details [ 47.878577][ T1167] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.253: inline data xattr refers to an external xattr inode [ 47.894287][ T308] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 47.900932][ T1167] EXT4-fs (loop4): Remounting filesystem read-only [ 47.908219][ T288] EXT4-fs (loop0): unmounting filesystem. [ 47.932829][ T6] usb 5-1: USB disconnect, device number 8 [ 47.964186][ T1173] ext4: Unknown parameter 'dont_measure' [ 47.974507][ T1173] ip_tables: iptables: counters copy to user failed while replacing table [ 48.003792][ T1176] FAULT_INJECTION: forcing a failure. [ 48.003792][ T1176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.017094][ T1176] CPU: 0 PID: 1176 Comm: syz.0.269 Not tainted syzkaller #0 [ 48.024392][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.034455][ T1176] Call Trace: [ 48.035007][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.037726][ T1176] [ 48.037733][ T1176] __dump_stack+0x21/0x24 [ 48.037756][ T1176] dump_stack_lvl+0x110/0x170 [ 48.037771][ T1176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.037786][ T1176] ? avc_has_perm_noaudit+0x30a/0x490 [ 48.037805][ T1176] dump_stack+0x15/0x24 [ 48.037820][ T1176] should_fail_ex+0x3bf/0x510 [ 48.037835][ T1176] should_fail+0xb/0x10 [ 48.037847][ T1176] should_fail_usercopy+0x1a/0x20 [ 48.037862][ T1176] _copy_from_user+0x1e/0xc0 [ 48.037881][ T1176] sk_getsockopt+0x1bf/0x1eb0 [ 48.045050][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.047807][ T1176] ? __cfi_sk_getsockopt+0x10/0x10 [ 48.052559][ T1174] device bridge_slave_0 entered promiscuous mode [ 48.056764][ T1176] ? selinux_socket_getsockopt+0x22f/0x340 [ 48.062606][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.067126][ T1176] ? __cfi_selinux_socket_getsockopt+0x10/0x10 [ 48.071514][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.075918][ T1176] ? __kasan_check_write+0x14/0x20 [ 48.080508][ T1174] device bridge_slave_1 entered promiscuous mode [ 48.085051][ T1176] ? mutex_unlock+0x8f/0x230 [ 48.136838][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.138582][ T1176] sock_getsockopt+0x74/0xa0 [ 48.143688][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.149970][ T1176] __sys_getsockopt+0x1a7/0x490 [ 48.154619][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.161539][ T1176] __x64_sys_getsockopt+0xbf/0xd0 [ 48.166113][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.173277][ T1176] x64_sys_call+0x3d/0x9a0 [ 48.173298][ T1176] do_syscall_64+0x4c/0xa0 [ 48.194033][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.197291][ T1176] ? clear_bhb_loop+0x30/0x80 [ 48.217904][ T1176] ? clear_bhb_loop+0x30/0x80 [ 48.222564][ T1176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.228445][ T1176] RIP: 0033:0x7f0ef859e0d9 [ 48.232844][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.252512][ T1176] RSP: 002b:00007f0ef9443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 48.260900][ T1176] RAX: ffffffffffffffda RBX: 00007f0ef8825fa0 RCX: 00007f0ef859e0d9 [ 48.268847][ T1176] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000004 [ 48.276793][ T1176] RBP: 00007f0ef9443090 R08: 0000200000000380 R09: 0000000000000000 [ 48.284738][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.292683][ T1176] R13: 00007f0ef8826038 R14: 00007f0ef8825fa0 R15: 00007ffffcf0b058 [ 48.300654][ T1176] [ 48.304247][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.311344][ T1141] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 48.328225][ T586] usb 4-1: USB disconnect, device number 4 [ 48.334346][ T1141] EXT4-fs (loop4): Remounting filesystem read-only [ 48.342399][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.364685][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.373094][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.379497][ T1181] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.271: Invalid inode bitmap blk 4 in block_group 0 [ 48.380151][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.400048][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.408231][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.415287][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.424893][ T1181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.426104][ T1185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.451108][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.468215][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.476594][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.484490][ T1185] Illegal XDP return value 4294967274 on prog (id 22) dev N/A, expect packet loss! [ 48.487213][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.503925][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.504913][ T1185] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #12: comm syz.2.270: checksumming directory block 0 [ 48.528237][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.536395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.549074][ T745] udevd[745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.565630][ T1174] device veth0_vlan entered promiscuous mode [ 48.580150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.589749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.607970][ T1174] device veth1_macvtap entered promiscuous mode [ 48.615171][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.623625][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.632112][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.651828][ T43] device bridge_slave_1 left promiscuous mode [ 48.657962][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.665926][ T43] device bridge_slave_0 left promiscuous mode [ 48.672128][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.681185][ T43] device veth1_macvtap left promiscuous mode [ 48.687206][ T43] device veth0_vlan left promiscuous mode [ 48.718481][ T1190] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 48.718754][ T292] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.726306][ T1190] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.744002][ T1190] F2FS-fs (loop3): invalid crc value [ 48.765051][ T1190] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.786039][ T1190] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.793236][ T1190] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.816579][ T287] EXT4-fs (loop2): unmounting filesystem. [ 48.844300][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.869556][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.884061][ T289] EXT4-fs (loop4): unmounting filesystem. [ 48.885859][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.901192][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.913707][ T1201] FAULT_INJECTION: forcing a failure. [ 48.913707][ T1201] name failslab, interval 1, probability 0, space 0, times 0 [ 48.935543][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.941685][ T1201] CPU: 1 PID: 1201 Comm: syz.2.277 Not tainted syzkaller #0 [ 48.953670][ T1201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.962077][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.963723][ T1201] Call Trace: [ 48.963732][ T1201] [ 48.979605][ T1201] __dump_stack+0x21/0x24 [ 48.983941][ T1201] dump_stack_lvl+0x110/0x170 [ 48.984274][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 48.988616][ T1201] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.988639][ T1201] ? __cfi_vfs_write+0x10/0x10 [ 48.988656][ T1201] dump_stack+0x15/0x24 [ 48.999743][ T292] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.004382][ T1201] should_fail_ex+0x3bf/0x510 [ 49.009287][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.013252][ T1201] __should_failslab+0xac/0xf0 [ 49.013277][ T1201] should_failslab+0x9/0x20 [ 49.025980][ T292] usb 1-1: config 0 descriptor?? [ 49.026940][ T1201] __kmem_cache_alloc_node+0x3d/0x2d0 [ 49.054502][ T1201] ? __se_sys_memfd_create+0xf2/0x3c0 [ 49.059876][ T1201] ? ksys_write+0x1fa/0x260 [ 49.064378][ T1201] ? __se_sys_memfd_create+0xf2/0x3c0 [ 49.069747][ T1201] __kmalloc+0xa4/0x1e0 [ 49.073891][ T1201] ? strnlen_user+0x10d/0x190 [ 49.078553][ T1201] __se_sys_memfd_create+0xf2/0x3c0 [ 49.083738][ T1201] __x64_sys_memfd_create+0x5b/0x70 [ 49.088933][ T1201] x64_sys_call+0x235/0x9a0 [ 49.093428][ T1201] do_syscall_64+0x4c/0xa0 [ 49.097834][ T1201] ? clear_bhb_loop+0x30/0x80 [ 49.102490][ T1201] ? clear_bhb_loop+0x30/0x80 [ 49.107150][ T1201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.113037][ T1201] RIP: 0033:0x7efccf79e0d9 [ 49.117440][ T1201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.137032][ T1201] RSP: 002b:00007efcd06b8e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.145433][ T1201] RAX: ffffffffffffffda RBX: 0000000000000491 RCX: 00007efccf79e0d9 [ 49.153403][ T1201] RDX: 00007efcd06b8ee0 RSI: 0000000000000000 RDI: 00007efccf835204 [ 49.161370][ T1201] RBP: 0000200000000680 R08: 00000000ffffffff R09: 0000000000000000 [ 49.169327][ T1201] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 49.177284][ T1201] R13: 00007efcd06b8ee0 R14: 00007efcd06b8ea0 R15: 00002000000000c0 [ 49.185244][ T1201] [ 49.190196][ T309] EXT4-fs error (device sda1): ext4_validate_block_bitmap:420: comm kworker/u4:4: bg 1: bad block bitmap checksum [ 49.203060][ T309] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1144 with error 74 [ 49.215778][ T309] EXT4-fs (sda1): This should not happen!! Data will be lost [ 49.215778][ T309] [ 49.249298][ T292] usbhid 1-1:0.0: can't add hid device: -71 [ 49.255273][ T292] usbhid: probe of 1-1:0.0 failed with error -71 [ 49.281454][ T1181] EXT4-fs (loop0): unmounting filesystem. [ 49.289908][ T292] usb 1-1: USB disconnect, device number 5 SYZFAIL: SIGSEGV pc-offset:0xfffffffffffe9ba8 pc:0x7fc3f0269988 addr:0x1 code=1 (errno 9: Bad file descriptor) [ 49.479731][ T279] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 49.488801][ T279] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 49.499071][ T279] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 49.508500][ T279] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 49.519435][ T279] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 49.528241][ T279] EXT4-fs error (device sda1) in ext4_free_inode:362: Corrupt filesystem [ 49.819120][ T309] device bridge_slave_1 left promiscuous mode [ 49.825219][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.832627][ T309] device bridge_slave_0 left promiscuous mode [ 49.838792][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.846411][ T309] device veth1_macvtap left promiscuous mode [ 49.852466][ T309] device veth0_vlan left promiscuous mode [ 50.629422][ T309] device bridge_slave_1 left promiscuous mode [ 50.635530][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.642934][ T309] device bridge_slave_0 left promiscuous mode [ 50.649088][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.656692][ T309] device bridge_slave_1 left promiscuous mode [ 50.662846][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.670186][ T309] device bridge_slave_0 left promiscuous mode [ 50.676254][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.684082][ T309] device bridge_slave_1 left promiscuous mode [ 50.690309][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.697633][ T309] device bridge_slave_0 left promiscuous mode [ 50.703854][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.711585][ T309] device bridge_slave_1 left promiscuous mode [ 50.717756][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.725165][ T309] device bridge_slave_0 left promiscuous mode [ 50.731323][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.739513][ T309] device veth1_macvtap left promiscuous mode [ 50.745508][ T309] device veth0_vlan left promiscuous mode [ 50.751478][ T309] device veth1_macvtap left promiscuous mode [ 50.757464][ T309] device veth0_vlan left promiscuous mode [ 50.763430][ T309] device veth1_macvtap left promiscuous mode [ 50.769508][ T309] device veth0_vlan left promiscuous mode [ 50.775447][ T309] device veth1_macvtap left promiscuous mode [ 50.781581][ T309] device veth0_vlan left promiscuous mode